Cybersecurity Analyst II (Computer Systems Analyst II)

Office of the Chief Information Officer | Government of Newfoundland and Labrador

The Office of the Chief Information Officer (OCIO) provides professional information technology and information management/protection capabilities to support the business of government and the citizens of Newfoundland and Labrador. Responsibilities include IT and IM/IP coordination, planning, budgeting and policy development; development and operation of government computer systems and infrastructure; procurement of IT goods and services; management of IT-related agreements and contracts; and administration of the Management of Information Act.

The Office of the Chief Information Officer is seeking a Cyber Security Analyst II (Tier 2 Security Analyst) to join its Cyber Security Operations team. The successful candidate will conduct advanced security analysis, incident response, threat hunting and monitoring using Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID, Microsoft Azure, Microsoft 365 and other enterprise security technologies. The analyst will investigate escalated alerts and incidents; correlate endpoint, identity, cloud, network and application telemetry; determine scope and impact; and support containment, eradication and recovery. Responsibilities include advanced log analysis and Kusto Query Language (KQL) queries; technical investigations and threat hunting; analysis of device timelines and identity signals; documentation of findings and recommendations; development and tuning of detection rules; vulnerability assessment and remediation support; maintenance of incident records and evidence integrity; preparation of procedures and playbooks; and technical guidance to Tier 1 analysts. The successful candidate will collaborate with senior analysts, technical teams and business stakeholders and participate in on-call incident response when required. Other related duties as required.

Screening Criteria

1. Completion of a degree or diploma in Information Technology, Computer Science, Cybersecurity or a related discipline. Equivalencies will be considered.
2. Experience investigating cybersecurity alerts, incidents or threats in an enterprise environment.
3. Experience using security technologies such as SIEM, EDR, Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID or comparable platforms.
4. Experience analyzing logs and security telemetry to identify threats, vulnerabilities, scope, and impact.
5. Experience supporting incident containment, remediation, recovery, or post-incident activities.
6. Experience with cloud security, threat hunting, digital forensics, malware analysis, KQL or a relevant cybersecurity certification would be considered an asset.

Assessment Criteria

1. Knowledge of cybersecurity operations, threat detection, incident response, and evidence-handling principles.
2. Knowledge of common cyber threats, attack techniques, security vulnerabilities, and mitigation practices.
3. Knowledge of enterprise identity, endpoint, cloud, network, and application security technologies.
4. Ability to analyze complex technical information and solve problems.
5. Ability to make sound and timely decisions during cybersecurity investigations.
6. Ability to manage time, priorities, and multiple concurrent tasks.
7. Ability to collaborate effectively as part of a multidisciplinary team.
8. Ability to communicate effectively, both verbally and in writing.
9. Client service orientation.

Conditions of Employment

Conditions of Offer

Recent and satisfactory enhanced security clearance.

Conditions of Acceptance

Willingness to participate in 24-7-365 on-call availability and respond on short notice.

Information for Applicants

For more information about this opportunity please contact Michael Pelley, Manager of Cybersecurity Operations at MPelley@gov.nl.ca.